Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kENQC_f8SKMzcFNaTxHoHyH_15Y.roa
File: kENQC_f8SKMzcFNaTxHoHyH_15Y.roa (raw, json)
Hash identifier: 82Ir2wXaGQxCnOGgwcRZdhx9kViXHJOoQt2OAcpn/hw=
Subject key identifier: 90:43:50:0B:F7:FC:48:A3:33:70:53:5A:4F:11:E8:1F:21:FF:D7:96
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE97343842CFE54ADB98FF04C04D60838
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kENQC_f8SKMzcFNaTxHoHyH_15Y.roa
Signing time: Sun 01 Oct 2023 04:15:59 +0000
ROA not before: Sun 01 Oct 2023 04:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e9:73:43:84:2c:fe:54:ad:b9:8f:f0:4c:04:d6:08:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 04:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9043500bf7fc48a33370535a4f11e81f21ffd796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:a6:d5:90:89:f4:d1:9e:4b:1b:2f:85:95:
a1:a7:d6:8f:89:5d:08:bc:c5:f7:14:32:bd:2a:8d:
5a:a1:0a:68:9f:1b:dd:37:f4:a7:38:c1:fa:e5:83:
70:d1:e7:d2:74:e1:33:3b:de:28:0c:94:07:e9:7f:
28:98:b7:14:07:77:6c:0a:2c:37:5c:24:44:79:19:
02:e7:46:b8:3d:83:35:c5:f0:9f:d5:13:5c:f6:83:
e7:de:83:bf:ae:32:fd:ff:20:0b:93:89:2c:34:54:
dd:77:17:f8:7a:3b:d3:0a:11:02:2d:83:4f:17:99:
17:37:3e:a1:9c:7d:52:9a:a6:16:13:99:a7:ee:85:
a1:b9:c2:04:07:77:02:cf:d0:e6:4b:db:cb:c1:45:
74:ea:35:24:c2:16:e5:9c:ac:27:27:60:f9:3d:a8:
21:72:67:1b:0d:f1:42:3f:89:c5:7d:ec:75:5d:4d:
25:14:d1:0f:06:2e:f4:67:2e:8d:85:e5:f7:75:2d:
20:b9:16:e9:23:b5:ff:9f:7c:72:21:29:86:11:1a:
69:0a:87:89:6f:a3:c1:ba:fc:45:f7:1d:53:fb:af:
49:fc:fa:c3:6f:b6:23:c5:38:ea:0c:e6:37:0f:94:
6b:e8:cd:af:35:3e:fd:4c:bc:76:b6:81:84:f0:b9:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:50:0B:F7:FC:48:A3:33:70:53:5A:4F:11:E8:1F:21:FF:D7:96
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kENQC_f8SKMzcFNaTxHoHyH_15Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:f4:7b:2f:f4:77:67:14:34:4b:04:4f:40:b2:80:4f:d5:26:
e3:81:85:24:4f:30:ba:e9:ed:d5:0c:6a:c1:4b:f7:41:a9:53:
7e:6a:1a:8b:64:8e:16:c0:c6:02:7c:a4:75:c3:c6:cd:85:b7:
8b:d6:bd:d4:a0:ef:12:67:14:30:09:03:31:73:af:c8:f4:9a:
32:f9:53:0f:66:e3:63:b3:df:8d:78:d8:99:f0:e0:f8:b7:69:
56:eb:de:50:8d:67:19:2a:fe:d8:cf:a9:89:a9:e9:1e:0f:d4:
b1:bf:8e:78:99:a5:ea:15:f8:84:34:71:9b:d9:c8:16:d1:18:
03:fc:3e:e4:f1:69:5e:3e:be:2f:f0:88:32:9c:75:04:aa:02:
a4:38:4e:2b:3b:c4:dc:a1:e2:f1:ce:1b:a9:a5:6a:f4:32:0e:
15:ef:31:f3:75:40:37:29:22:1b:c3:1a:e6:2e:66:a6:89:ea:
98:5b:02:f2:85:e2:5a:7c:f6:b8:1a:4c:cd:5b:f0:7d:bf:ca:
36:b9:42:30:54:5e:ae:89:7f:ef:5a:17:a0:e0:a6:81:2d:2b:
36:fd:ce:a8:c7:c9:94:cd:74:f6:e1:d7:2d:0a:94:15:18:80:
83:ad:63:4e:32:a7:b8:d3:df:88:13:f4:85:81:b5:0a:0a:97:
a5:0d:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:51 2025 by rpki-client